Box as a deal room
Box, founded in the United States in 2005, is a content cloud rather than a dedicated virtual data room. Many UK organisations already store their files in it, which raises a fair question: why pay for a separate room? It scores 8.3 overall in our table, with good security and ease of use, but lower marks for support and value as a deal tool.
When Box is enough
If you are sharing documents with one known party, such as a bank refinancing, a joint venture partner or an investor doing light diligence, Box may be sufficient. It has SSO, two-factor login, watermarking, a full audit trail, e-signature, a mobile app, an API and AI tools. Your IT team will already know it, and there is no new supplier to vet.
| Scenario | Box | Dedicated VDR |
|---|---|---|
| Refinancing with one lender | Usually enough | Optional |
| Joint venture document exchange | Usually enough | Optional |
| Sale to a single agreed buyer | Workable | Better audit of Q&A |
| Competitive auction | Not recommended | Recommended |
| AIM or IPO verification | Not recommended | Recommended |
When it is not
A competitive business sale needs things Box does not do in our data: a structured Q&A workflow, document rights control to withdraw access to downloaded files, and redaction. Without Q&A, questions scatter across email threads and the seller’s adviser loses the single record. Without rights control, a bidder who drops out may keep copies of everything they downloaded.
There is also a structural risk. When deal documents sit in the same system as the rest of the company’s files, a sharing mistake can expose more than intended: a folder link set too broadly, or an internal colleague with access to the deal folder who should not know a sale is happening. A dedicated room keeps the transaction separate by design. If you do use Box, create a dedicated area for the deal, restrict internal access to the deal team, disable downloads where you can and review the access report before each new party is invited.
UK GDPR and security credentials
Box lists SOC 2, ISO 27001, GDPR and HIPAA in its credentials, the broadest set in our line-up. Large organisations sometimes have data residency options on their Box contracts; we do not hold that detail, so ask your account manager where your content is stored and whether a deal folder can be kept separate. As controller of personal data in shared files, you remain responsible for minimising what you share; Cyber Essentials from the NCSC is a useful baseline for your own side of the setup.
Per-user pricing
Box prices per user, from $15/user/mo, approx. £12 per user at our rate. That is indicative only; confirm the plan and check VAT. External collaborators may be handled differently from internal seats, so ask. If you already pay for Box, adding a deal folder may cost nothing extra, which is its main advantage. See our costs guide for how per-user and per-room pricing compare.
Compared with dedicated rooms
Ellty has Q&A, document rights control, e-signature and AI tools, with published pricing from $149/mo (approx. £115). SecureDocs offers flat published pricing and e-signature but, like Box, lacks Q&A.
| Box | Ellty | SecureDocs | |
|---|---|---|---|
| Pricing | Per user | Published, from $149/mo | Published, from $250/mo |
| Q&A | No | Yes | No |
| Document rights control | No | Yes | Yes |
| SSO | Yes | No | No |
Questions people ask
Can I use Box as a data room for selling my business?
For a sale to a single agreed buyer it can work, but competitive sales usually need structured Q&A and document rights control, which Box lacks in our data.
How much does Box cost in pounds?
From $15/user/mo, approx. £12 per user at our rate. Confirm the plan and VAT with Box.
Does Box store data in the UK?
We do not hold that detail. Ask your Box account manager about data residency options for your contract.
Is Box secure enough for due diligence?
Its credentials are strong, including SOC 2 and ISO 27001. The gap is deal workflow, not security certification.
